ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Firewall Configuration in Linux in Centos 6.2

    Scheduled Pinned Locked Moved IT Discussion
    centosiptableslinuxunixnetstatcentos 6
    81 Posts 7 Posters 20.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • LakshmanaL
      Lakshmana @thanksajdotcom
      last edited by

      @thanksajdotcom I need to do in IPtables only for the configuration for the firewall at linux OS(Centos)

      1 Reply Last reply Reply Quote 0
      • StrongBadS
        StrongBad @Lakshmana
        last edited by

        @Lakshmana said:

        @scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.

        Ping does not use a part. It is not part of either TCP or UDP but of ICMP which is portless.

        LakshmanaL 1 Reply Last reply Reply Quote 0
        • LakshmanaL
          Lakshmana @StrongBad
          last edited by

          @StrongBad How to do a block diagram for designing the Firewall?

          thanksajdotcomT StrongBadS 2 Replies Last reply Reply Quote 0
          • thanksajdotcomT
            thanksajdotcom @Lakshmana
            last edited by

            @Lakshmana said:

            @StrongBad How to do a block diagram for designing the Firewall?

            What do you mean? You need to know which ports to have open, whether that's 80 (HTTP), 22 (SSH), 443 (HTTPS) or what, and then you do a deny all at the bottom, which basically says that if you didn't open it, it's blocked.

            LakshmanaL 1 Reply Last reply Reply Quote 0
            • LakshmanaL
              Lakshmana @thanksajdotcom
              last edited by

              @thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?

              thanksajdotcomT StrongBadS 2 Replies Last reply Reply Quote 0
              • thanksajdotcomT
                thanksajdotcom @Lakshmana
                last edited by

                @Lakshmana said:

                @thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?

                As @StrongBad said, ping doesn't have a port. It's ICMP as the traffic type, so it doesn't use a TCP or UDP port. It should be good to go already.

                LakshmanaL 1 Reply Last reply Reply Quote 0
                • LakshmanaL
                  Lakshmana @thanksajdotcom
                  last edited by

                  @thanksajdotcom said:

                  s ICMP as the traffic typ
                  OK but how can i make the other system in the same network as well as other network to be easily ping the system.

                  thanksajdotcomT 1 Reply Last reply Reply Quote 0
                  • StrongBadS
                    StrongBad
                    last edited by

                    ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?

                    thanksajdotcomT 1 Reply Last reply Reply Quote 1
                    • thanksajdotcomT
                      thanksajdotcom @Lakshmana
                      last edited by

                      @Lakshmana said:

                      @thanksajdotcom said:
                      s ICMP as the traffic typ
                      OK but how can i make the other system in the same network as well as other network to be easily ping the system.

                      If they're on the same network, you don't have to do anything to enable it. Just type ping ip.of.the.device or the hostname.

                      LakshmanaL 1 Reply Last reply Reply Quote 0
                      • thanksajdotcomT
                        thanksajdotcom @StrongBad
                        last edited by

                        @StrongBad said:

                        ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?

                        Exactly. You're freaking out about enabling them when they are enabled by default, so unless you did something SPECIFIC TO DISABLE THEM, they are already working.

                        1 Reply Last reply Reply Quote -1
                        • StrongBadS
                          StrongBad @Lakshmana
                          last edited by

                          @Lakshmana said:

                          @thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?

                          Port 22 is open by default as well. How did these get closed?

                          thanksajdotcomT 1 Reply Last reply Reply Quote 1
                          • LakshmanaL
                            Lakshmana @thanksajdotcom
                            last edited by

                            @thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?

                            thanksajdotcomT 1 Reply Last reply Reply Quote 0
                            • thanksajdotcomT
                              thanksajdotcom @StrongBad
                              last edited by

                              @StrongBad said:

                              @Lakshmana said:

                              @thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?

                              Port 22 is open by default as well. How did these get closed?

                              Exactly. Especially if this is a server, you shouldn't have a GUI by default, meaning you MUST have SSH access as it is.

                              1 Reply Last reply Reply Quote 0
                              • StrongBadS
                                StrongBad
                                last edited by

                                Maybe you should provide us the output of your IPTables configuration file. Then we can tell you what to change. Not sure how else to help.

                                LakshmanaL 1 Reply Last reply Reply Quote 1
                                • thanksajdotcomT
                                  thanksajdotcom @Lakshmana
                                  last edited by

                                  @Lakshmana said:

                                  @thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?

                                  Again, I have no idea what you're talking about. SSH should already be open. Ping should already be open. Have you tried actually using either to make sure they work before you talk about getting them to work? Please try pinging and SSHing into your devices and paste the output here. Until you do that, we can't help you any further.

                                  1 Reply Last reply Reply Quote 0
                                  • LakshmanaL
                                    Lakshmana @StrongBad
                                    last edited by

                                    @StrongBad I did not configured IP table.I need to configure IP table tommorow only.I dont know how to configure Iptable any link anyone provide.

                                    thanksajdotcomT StrongBadS 2 Replies Last reply Reply Quote 0
                                    • thanksajdotcomT
                                      thanksajdotcom @Lakshmana
                                      last edited by

                                      @Lakshmana said:

                                      @StrongBad I did not configured IP table.I need to configure IP table tommorow only.I dont know how to configure Iptable any link anyone provide.

                                      What do you need to configure it for? What is your purpose of configuring IPTables? It sounds like you want to know how to do something without a clearly defined objective of what you actually need to do. What is your purpose in configuring IPTables?

                                      LakshmanaL 1 Reply Last reply Reply Quote 0
                                      • LakshmanaL
                                        Lakshmana @thanksajdotcom
                                        last edited by

                                        @thanksajdotcom I need to configure basic firewall in Linux OS and to test the ports are working from the WAN to LAN after configuring the firewall.This is my objective

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          TheCheat
                                          last edited by

                                          This is what we need:

                                          cat /etc/sysconfig/iptables
                                          
                                          1 Reply Last reply Reply Quote 1
                                          • StrongBadS
                                            StrongBad @Lakshmana
                                            last edited by

                                            @Lakshmana said:

                                            @StrongBad How to do a block diagram for designing the Firewall?

                                            What is a block diagram?

                                            LakshmanaL 1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 1 / 5
                                            • First post
                                              Last post